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(1) Real Party in Interest 

The real party in interest is Hewlett-Packard Development Company, L,P. 

(2) Related Appeals and Interferences 

The Appellant is unaware of any appeals or interferences related to this case. 

(3) Status of Claims 

Claims 1-13 are pending of which claims 1, 4, 5, 19 and 1 1 are independent. All pending 
claims are hereby appealed. 

(4) Status of Amendments 

No amendment was filed subsequent to the Final Office Action dated August 31, 2007. 

(5) Summary of Claimed Subject Matter 

Claim 1 . A computer-implemented method for managing respective sessions between mobile 
communication devices (FIG. 1, 102; p.4, 1. 7-14) and an application program (FIG. 1, 106; p.4, 
I. 15-19) hosted on a data processing system with a gateway module (FIG. 1, 1 10; p. 4, 1. 20-27) 
that is coupled to the mobile communications devices and to the application program, 
comprising: 
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generating at the gateway module respective first session identifiers upon receipt of initial 
requests from the mohile communication devices at the gateway module (FIG. 1, 104, 108; p.5,1. 
1-8; FIG. 2,202; p.6, 1 .6-8) and transmitting the first session identifiers to the application 
program (FIG. 1, 104, 106, p.5,1. 1-8; FIG. 2,212; p. 6, 1. 16-17); 

associating the first session identifiers with corresponding second session identifiers from 
the application program at the gateway module, wherein respective connections are established 
between the mobile communications devices and the application program (FIG. 2, 208, 214; p. 6, 
I. 14-19) and 

in response to subsequent communications from the mobile devices to the application 
program while the respective connections between the mobile devices to the application program 
are established and for communications within the respective sessions, fransmitting from the 
gateway module to the application program the second session identifiers that are associated with 
the first session identifiers of the mobile devices of the subsequent communications (FIG. 2, 216; 
p. 6, 1. 19-22). 

4. An apparatus for managing respective sessions between mobile communication devices (FIG. 
1, 102; p.4, 1. 7-14) and an application program (FIG. 1, 106; p.4, 1. 15-19) hosted on a data 
processing system, comprising: 

means for generating respective first session identifiers upon receipt of initial requests 
from the mobile communication devices (FIG. 1, 104, 108; p.4, 1. 20-27; p. 5, 1. 1-8; FIG. 2, 202; 
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p. 6, 1. 6-8) and transmitting the first session identifiers to the application program (FIG. 1, 104, 
106; p.4, 1. 15-17, 1. 22-24; p. 5, 1. 1-8; FIG. 2, 212; p. 6, 1. 16-17); 

means for associating the first session identifiers with corresponding second session 
identifiers firom the application program (FIG. 1,110; p.4, 1. 20-27; p. 5, 1. 8-9; FIG. 2, 208, 214; 
p. 6, 1. 14-19; FIG. 2, 208, 214; p. 6, 1. 14-19), wherein respective connections are established 
between the mobile communications devices and the application program and 

means for transmitting the second session identifiers that are associated with the first 
session identifiers of the mobile devices to the application program in response to and in 
association with subsequent communications from the mobile devices directed to the application 
program while the respective coimections between the mobile devices to the application program 
are established and for communications within the respective sessions (FIG. 1, 104, 106; p.4, 1. 
15-17, 1. 22-24; FIG. 2, 216; p. 6, 1. 19-22). 

5. A computer-implemented method for managing respective shopping sessions between 
wireless communication devices (FIG. 1, 102; p.4, 1. 7-14)and a merchant appHcation (FIG. 1, 
106; p.4, 1. 15-19) with a gateway module (FIG. 1, 1 10; p. 4, 1. 20-27) that is coupled to the 
mobile commimications devices and to the merchant application, comprising: 

generating at the gateway module respective wireless session identifiers upon receipt of 
initial requests from the wireless communication devices at the gateway module FIG. 1, 104, 
108; p. 5, 1. 1-8; FIG. 2, 202; p. 6, 1. 6-8) and transmitting the wireless session identifiers to the 
merchant application (FIG. 1, 104, 106, p. 5, 1. 1-8; FIG. 2, 212; p. 6, 1. 16-17); 
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generating at the merchant application respective merchant session identifiers for the 
wireless session identifiers (FIG. 3, 306; p. 7, 1. 10-12) and transmitting the merchant session 
identifiers to the gateway module (FIG. 3, 310; p. 7, 1. 16-19); 

associating the wireless session identifiers with corresponding merchant session 
identifiers at the gateway module, wherein respective connections are established between the 
mobile communications devices and the merchant application (FIG. 2, 208, 214; p. 6, 1. 14-19) 
and 

in response to subsequent communications fi-om the mobile devices to the merchant 
application while the respective connections between the mobile devices to the merchant 
application are established and for communications within the respective sessions, transmitting 
fi-om the gateway module to the merchant application the merchant session identifiers that are 
associated with the wireless session identifiers of the mobile devices of the subsequent 
communicafions (FIG. 2, 216; p. 6, 1. 19-22). 

6. The method of claim 5, further comprising: 

receiving checkout requests fiom the wireless communication devices at the gateway 
module and transferring the checkout requests to a wallet module that manages user 
authentication (step 352, FIG. 4); 

when a user at a wireless communications device has logged-in to the wallet module, 
transmitting payment options fi^om the wallet module to the wireless communications device in 
response to a checkout request fi"ora the wireless communications device (step 360, FIG. 4); and 
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when a user at a wireless communications device has not logged-in to the wallet module, 
transmitting a log-in prompt from the wallet module to the wireless communications device in 
response to a checkout request from the wireless communications device (Step 356, FIG. 4). , 

7. The method of claim 6, ftirther comprising generating at the wallet module respective wallet 
session identifiers for the wireless session identifiers and associating the wallet session 
identifiers with corresponding wireless session identifiers in a wallet session identifier table 
(steps 358, 354 FIG. 4). 

8. The method of claim 7, ftirther comprising, in response to a payment request from a wireless 
communications device, transmitting the payment request from the gateway module to the 
merchant application, disassociating the wireless session identifier from the corresponding 
merchant session identifier, and generating a new wireless session identifier for the wireless 
communications device when another initial request is received from the wireless 
communications device (steps 228, 230 and 202 FIG 2). 

9. The method of claim 8, fiuther comprising clearing inactive entries from the wallet session 
identifier table, (step 362, FIG. 4) 
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10. An apparatus for managing respective shopping sessions between wireless communication 
devices (FIG. 1, 102; p.4, 1. 7-14) and a merchant application (FIG. 1, 106; p.4, 1. 15-19), 
comprising: 

means for generating respective wireless session identifiers upon receipt of initial 
requests from the wireless communication devices (FIG. 1, 104, 108; p.4, 1.20-27; p. 5, 1. 1-8; 
FIG. 2, 202; p. 6, 1. 6-8) and transmitting the wireless session identifiers to the merchant 
application (FIG.l, 104, 106; p.4, 1. 15-17, 1.22-24; p.5, 1. 1-8; FIG. 2,212; p.6,1. 16-17); 

means for associating the wireless session identifiers with corresponding merchant 
session identifiers received from the merchant application, wherein respective connections are 
established between the mobile communications devices and the merchant application (FIG. 1, 
110; p. 4, 1. 20-27; p. 5, 1. 8-9; FIG. 2, 208, 214; p. 6, 1. 14-19; FIG. 2, 208, 214; p. 6, 1. 14-19); 
and 

means for transmitting the merchant session identifiers that are associated with the 
wireless session identifiers of the wireless devices to the merchant application in response to and 
in association with subsequent communications from the wireless devices directed to the 
merchant application while the respective connections between the mobile devices to the 
merchant application are established and for communications within the respective sessions 
(FIG. 1, 104, 106; p.4, 1. 15-17, 1. 22-24; FIG. 2, 216; p. 6, 1. 19-22). 



9 



PATENT Atty Docket No.: 10007291-1 

App. Ser. No.: 09/852,360 

1 1 . A system for managing respective sessions between mobile communication devices (FIG. 1 , 
102; p. 4, 1. 7-14) and an application program hosted on a data processing system (FIG. 1, 106; 
p.4, 1. 15-19), comprising: 

a mobile interface (FIG. 1, 108; p. 4, 1. 24-27) conlBgured and arranged to connect with a 
plurality of mobile communication devices; 

a gateway (FIG. 1, 104; p. 4, 1. 20-27) coupled to the mobile interface and to the 
application program, the gateway configured to generate respective first session identifiers upon 
receipt of initial requests firom the mobile communication devices (FIG. 1, 104, 108; p. 4, 1. 20- 
27; p. 5, L 1-8; FIG. 2, 202; p. 6, 1. 6-8), associate the first session identifiers with corresponding 
second session identifiers received firom the application program, wherein respective connections 
are established between the mobile communications devices and the application program (FIG. 
1, 110; p.4, 1.20-27; p. 5, 1.8-9; FIG. 2,208,214; p.6, 1. 14-19; FIG. 2, 208, 214; p. 6, 1. 14-19), 
and transmit the second session identifiers that are associated with the first session identifiers to 
the application program in response to and associated with subsequent communications fi-om the 
mobile devices to the application program while the respective connections between the mobile 
devices to the application program are established and for communications within the respective 
sessions (FIG. 1, 104, 106; p.4, 1. 15-17, 1. 22-24; FIG. 2,216; p. 6, 1. 19-22). 
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(6) Grounds of Rejection to be Reviewed on Appeal 

A. Claims 1-3, 4 and 11-13 rejected under 35 U.S.C. §102(e) as being anticipated by 
Aziz et al., 6,643,701 (referred to as Aziz). 

B. Claims 5 and 10 rejected under 35 U.S.C. §103(a) as being unpatentable over 
Aziz in view of Davis et al., 6,367,009 (referred to as Davis). 

C. Claims 6-9 rejected under 35 U.S.C. §103(a) as being unpatentable over Aziz in 
view of Davis in further view of Sparks et al., 6,167,382, (referred to as Sparks). 

D. Claims 1-13 rejected imder 35 U.S.C. §103(a) as being unpatentable over Nguyen 
et al., 5,931,917, (referred to as Nguyen) in view of Davis. 
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(7) Arguments 

A. The rejection of claims 1-3, 4 and 11-13 under 35 U.S.C. §1 02(e) as being anticipated 
by Aziz should be reversed because Aziz fails to teach all the features of independent claims 
1, 4 and 11. 

The test for determining if a reference anticipates a claim, for purposes of a 

rejection under 35 U.S.C. § 102, is whether the reference discloses all the elements of the 

claimed combination, or the mechanical equivalents thereof functioning in substantially the same 

way to produce substantially the same results. As noted by the Court of Appeals for the Federal 

Circuit in Lindemann Maschinenfabrick GmbH v. American Hoist and Derrick Co., 221 USPQ 

481, 485 (Fed. Cir. 1984), in evaluating the sufficiency of an anticipation rejection under 35 

U.S.C. § 102, the Court stated: 

Anticipation requires the presence in a single prior art reference 
disclosure of each and every element of the claimed invention, 
arranged as in the claim. 

Therefore, if the cited reference does not disclose each and every element of the claimed 
invention, then the cited reference fails to anticipate the claimed invention and, thus, the claimed 
invention is distinguishable over the cited reference. 

The rejection of claims 1, 3, 4 and 11-13 under 35 U.S.C. §102(e) is clearly improper 
because Aziz fails to teach all the features of independent claims 1 , 4 and 1 1 . 

Claim 1 recites, 

generating at the gateway module respective first session identifiers upon 
receipt of initial requests fi-om the mobile communication devices at the gateway 
module and transmitting the first session identifiers to the application program; 
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associating the first session identifiers with corresponding second session 
identifiers fi-om the application program at the gateway module, wherein 
respective connections are established between the mobile communications 
devices and the application program; and 

in response to each subsequent communication from each mobile device 
to the application program via the connection between the mobile device and the 
application program while the coimection is established, transmitting from the 
gateway module to the application program the second session identifier that is 
associated with the first session identifier of the mobile device of the subsequent 
communication. 



These features from claim 1 set forth that the gateway module generates respective first 
session identifiers upon receipt of initial requests from the mobile communication devices at the 
gateway module and fransmits the first session identifiers to the application program. And in 
response to each subsequent communication from each mobile device to the application program 
via the connection between the mobile device and the application program while the connection 
is established, the method transmits from the gateway module to the application program the 
second session identifier that is associated with the first session identifier of the mobile device of 
the subsequent communication. That is, the second session identifier, which the application 
provided to the gateway, is fransmitted back to the application from the gateway for the 
subsequent communications. 

The Final Office Action dated September 6, 2007, reHes on the paper entitled, "The SSL 

Protocol", Version 3.0, by Kocher et al. (referred to as Kocher) in interpreting the teachings of 

Aziz. Neither Aziz nor Kocher teaches or suggests the following features of claim 1 , 

in response to each subsequent commimication from each mobile device to 
the application program via the connection between the mobile device and the 
application program while the connection is established, fransmitting from the 
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gateway module to the application program the second session identifier that is 
associated with the first session identifier of the mobile device of the subsequent 
communication. 

That is neither Aziz nor Kocher teaches or suggests the second session identifier, which 
the application provided to the gateway, is transmitted back to the application fi-om the gateway 
for the subsequent commimications. 

Aziz discloses using an SSL handshaking session at step 920 to create a secure link 
between the relay and the server. See coliamn 8, lines 16-24. Afl;er the handshakuig session 
between the relay and the server is completed and after the secure link between the relay and the 
server is established, the client and the relay establish a secure coimection between each other. 
See column 8, lines 42-45. 

The rejection alleges the first and second identifiers are taught by the "hello messages" 
disclosed in Kocher on pages 20-21 used to create the SSL secure connections of Aziz. Kocher 
discloses the hello messages are used when a client first connects to a server or to renegotiate 
security parameters. Kocher ftirther discloses on pages 18-19 that the transmission of session 
identifiers is apparently for resuming a previous session or duplicating an existing session. Thus, 
the client does not send a hello message for each subsequent communication between the client 
and the server. Hence, once the two different secure connections are established between the 
client and the relay and between the relay and the server, respectively, hello messages are not 
exchanged for each subsequent commxmication fi-om the client. Thus, Aziz fails to teach in 
response to each subsequent communication firom each mobile device to the application 
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program, while the connection is established, transmitting from the gateway module to the 
application program the second session identifier. 

Furthermore, Aziz discloses two different secure connections are established between the 
client and the relay and between the relay and the server, respectively. Thus, hello messages or 
session identifiers for the first secure connection and the second secure connection are not 
associated in Aziz. Hence, Aziz fails to teach, "associating the first session identifiers with 
corresponding second session identifiers from the application program at the gateway module," 
as recited in claim 1 . 

Independent claims 4 and 1 1 include similar features and are not shown to be anticipated 
for at least the reasons set forth above. 

B. The rejection of claims 5 and 10 under 35 U.S.C. §103(a) as being unpatentable over 
Aziz in view of Davis should be reversed because Aziz in view of Davis fails to teach or 
suggest all the features of independent claims 5 and 10. 

The test for determining if a claim is rendered obvious by one or more references for 

purposes of a rejection under 35 U.S.C. § 1 03 is set forth in KSR International Co. v. Teleflex 

Inc., 550 U.S._, 82 USPQ2d 1385 (2007): 

"Under §103, the scope and content of the prior art are to be determined; 
differences between the prior art and the claims at issue are to be ascertained; and 
the level of ordinary skill in the pertinent art resolved. Against this background 
the obviousness or nonobviousness of the subject matter is determined. Such 
secondary considerations as commercial success, long felt but unsolved needs, 
failure of others, etc., might be utilized to give light to the circvimstances 
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siorrounding the origin of the subject matter sought to be patented." Quoting 
Graham v. John Deere Co. of Kansas City, 383 U.S. 1 (1966). 

According to the Examination Guidelines for Determining Obviousness Under 35 U.S.C. 

103 in view of KSR International Co. v. Teleflex Inc., Federal Register, Vol. 72, No. 195, 57526, 

57529 (October 10, 2007), once the Graham factual inquiries are resolved, there must be a 

determination of whether the claimed invention would have been obvious to one of ordinary skill 

in the art based on any one of the following proper rationales: 

(A) Combining prior art elements according to known methods to yield 
predictable results; (B) Simple substitution of one known element for another to 
obtain predictable resuhs; (C) Use of known technique to improve similar devices 
(methods, or products) in the same way; (D) Applying a known technique to a 
known device (method, or product) ready for improvement to yield predictable 
resuhs; (E) "Obvious to try" — choosing from a finite number of identified, 
predictable solutions, with a reasonable expectation of success; (F) Known work 
in one field of endeavor may prompt variations of it for use in either the same 
field or a different one based on design incentives or other market forces if the 
variations would have been predictable to one of ordinary skill in the art; (G) 
Some teaching, suggestion, or motivation in the prior art that would have led one 
of ordinary skill to modify the prior art reference or to combine prior art reference 
teachings to arrive at the claimed invention. KSR International Co. v. Teleflex 
Inc., 550 U.S._, 82 USPQ2d 1385 (2007). 

Furthermore, as set forth in KSR International Co. v. Teleflex Inc. , quoting from In re 
Kahn, 441 F. 3d 977, 988 (CA Fed. 2006), "[R]ejections on obviousness grounds cannot be 
sustained by mere conclusory statements; instead, there must be some articulated reasonings with 
some rational underpinning to support the legal conclusion of obviousness." 

Furthermore, as set forth in MPEP 2143.03, to ascertain the differences between the prior 
art and the claims at issue, "[a]ll claim limitations must be considered" because "all words in a 
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claim must be considered in judging the patentability of that claim against the prior art." In re 
Wilson, 424 F.2d 1382, 1385. 

If the above-identified criteria and rationales are not met, then the cited references fail to 
render obvious the claimed invention and, thus, the claimed invention is distinguishable over the 
cited references. 

Independent claims 5 and 10 recite features similar to claim 1 described above which are 
not taught or suggested by Aziz in view of Davis. 

C. The rejection of claims 6-9 under 35 U.S.C. §103(a) as being unpatentable over Aziz 
in view of Davis in further view of Sparlcs should be reversed because Aziz in view of Davis 
in further view of Sparlts fails to teach or suggest all the features of dependent claims 6-9. 

Claim 6 includes features of receiving checkout requests from the wireless 
communication devices at the gateway module and transferring the checkout requests to a wallet 
module that manages user authentication. Claim 6 also recites a user logged into a wallet 
module, transmitting payment options from the wallet module to the wireless devices, and 
transmitting a log-in prompt from the wallet module to the wfreless -devices. The rejection cites 
Aziz' FIG. 3 and Sparks' FIGS. 3, 4, 9, 59, 60; column 2, lines 36-49; and column 17, lines 12- 
26 to teach these features of claim 6. However, there is no apparent element in this portion of 
Sparks or Aziz that corresponds to the gateway module at which checkout requests are received 
or the claimed wallet module to which the checkout requests are sent. Furthermore, the wallet 
module and its corresponding claimed features described above are not taught or suggested. The 
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cited passage in column 17 describes a customer invoice table and an order table which does not 
teach or suggest any of the claimed featiires. The cited passage in column 2 describes a system 
transmitting orders. However, the passage does not disclose these claimed features. 

Claim 8 includes the following features: in response to a payment request from a wireless 
communications device, transmitting the payment request from the gateway module to the 
merchant application, disassociating the wireless session identifier from the corresponding 
merchant session identifier, and generating a new wireless session identifier for the wireless 
communications device when another initial request is received from the wireless 
communications device. Aziz and Sparks are not shown to suggest these features. The 
Examiner cites Aziz' general teachings of session resumption procedures as corresponding to 
these featuress. However, there is no apparent suggestion in either of Aziz or Sparks that any 
disassociation takes place in response to a payment request as claimed. 

D. The rejection of claims 1-13 under 35 U.S.C. §lQ3(a) as being unpatentable over 
Nguyen in view of Davis should be reversed because Nguyen in view of Davis fails to teach 
or suggest all the features of independent claims 1, 4, 5, 10 and 11. 

The rejection of claims 1-13 under 35 U.S.C. §103(a) is clearly improper because 
Nguyen in view of Davis fails to teach or suggest all the features of independent claims 1, 4, 5, 
10 and 11. 
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Independent claim 1 recites, "associating the first session identifiers with corresponding 
second session identifiers from the application program at the gateway module." Per these claim 
features, the second session identifiers are from the application program. 

On pages 9-10 of the Final Office Action dated August 31, 2007, the Examiner clarifies 
the rejection of Nguyen in view of Davis. On page 10, lines 1-7 of the Final Office Action, the 
Examiner relies on figures 20B and 20C and column 64, lines 36-38 of Nguyen to teach the 
features of claim 1. The Examiner indicates the claimed second session identifiers from the 
application is TID 2005, which is shown in figure 20B of Nguyen, and the claimed first session 
identifier is the XACT REQ 2010 shown in figure 20C of Nguyen which allegedly uniquely 
represents a fransaction request from one of the clients 200. Also, the Examiner indicates the 
claimed application is the ACA Bank 2004 shown in figure 20C, and the claimed gateway 
module is the VPO 2007 shown in figure 20C. 

Regarding the claimed second session identifier which is allegedly taught by the TID 
2005 of Nguyen, Nguyen discloses the POS terminal creates a data structure 2002 for each 
fransaction request and sends the data structure to the Bank over a communications link 2003. 
The data structure includes the TID field 2005 which identifies the physical terminal from which 
the transaction originated. See column 65, lines 19-36. Thus, the TID field 2005, which is 
allegedly the claimed second session identifiers, is generated by the POS and not the bank, which 
is allegedly the claimed application. Hence, Nguyen fails to teach or suggest second session 
identifiers from an application, as claimed in claim 1 . 
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Claim 1 also recites, "wherein respective connections are established between the mobile 
communications devices and the application program." Nguyen fails to teach or suggest 
establishing connection between mobile communications devices and the application program. 
Instead, in Nguyen, the clients 2000 communicate with the VPOS terminal to perform a 
transaction, such as a payment. The VPOS communicates with the bank 2004 on a separate 
connection 2003 shown in figure 20C. The clients 2000 are not attempting to communicate with 
the bank 2004, and there is no connection established between the clients 2000 and the bank 
2004. Instead, the clients 2000 are communicating with the merchant VPOS and not the banks, 
for example, to pay for goods purchased firom the merchants. See column 40, lines 43-45. 

Davis was combined with Nguyen to teach a mobile device. Davis fails to remedy the 
deficient teachings of Nguyen. Thus, Nguyen in view of Davis fails to teach or suggest all the 
features of claim 1 . 

Independent claims 4, 5, 10 and 1 1 recite features similar to the features of claim 1 
described above. Accordingly, Nguyen in view of Davis clearly fails to teach or suggest all the 
features of claims 1-13. 
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(8) Conclusion 

For at least the reasons given above, the rejection of claims 1-13 described above should be 
reversed and these claims allowed. 

Please grant any required extensions of time and charge any fees due in connection with 
this Appeal Brief to deposit account no. 08-2025. 



Respectfully submitted. 



Dated: January 29, 2008 




Registration No.: 45,301 

MANNAVA & KANG, P.C. 
8221 Old Courthouse Road 
Suite 104 

Vienna, VA 22182 

(703) 652-3822 

(703) 865-5150 (facsimile) 
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(9) Claim Appendix 

1 . A computer-implemented method for managing respective sessions between mobile 
communication devices and an application program hosted on a data processing system with a 
gateway module that is coupled to the mobile communications devices and to the application 
program, comprising: 

generating at the gateway module respective first session identifiers upon receipt of initial 
requests fi-om the mobile communication devices at the gateway module and transmitting the 
first session identifiers to the application program; 

associating the first session identifiers with corresponding second session identifiers from 
the application program at the gateway module, wherein respective connections are established 
between the mobile communications devices and the application program and 

in response to subsequent communications from the mobile devices to the application 
program while the respective connections between the mobile devices to the application program 
are established and for communications within the respective sessions, transmitting from the 
gateway module to the application program the second session identifiers that are associated with 
the first session identifiers of the mobile devices of the subsequent communications. 

2. The method of claim 1, fiirther comprising: 

receiving requests of a first type from the mobile devices at the gateway module and 
transferring the first type requests to an authentication module that manages user authentication; 
and 
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when a user at a mobile device has not logged-in to the authentication module, 
transmitting a log-in prompt from the authentication module to the mobile device in response to 
a request of the first type from the mobile device. 

3. The method of claim 2, further comprising generating at the authentication module respective 
authentication identifiers for the first session identifiers and associating the authentication 
identifiers with corresponding first session identifiers. 

4. An apparatus for managing respective sessions between mobile communication devices and 
an application program hosted on a data processing system, comprising: 

means for generating respective first session identifiers upon receipt of initial requests 
from the mobile communication devices and transmitting the first session identifiers to the 
application program; 

means for associating the first session identifiers with corresponding second session 
identifiers from the application program, wherein respective connections are established between 
the mobile communications devices and the application program and 

means for fransmitting the second session identifiers that are associated with the first 
session identifiers of the mobile devices to the application program in response to and in 
association with subsequent communications from the mobile devices directed to the application 
program while the respective connections between the mobile devices to the application program 
are established and for communications within the respective sessions. 
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5. A computer-implemented method for managing respective shopping sessions between 
wireless communication devices and a merchant application with a gateway module that is 
coupled to the mobile communications devices and to the merchant application, comprising: 

generating at the gateway module respective wireless session identifiers upon receipt of 
initial requests from the wireless communication devices at the gateway module and transmitting 
the wireless session identifiers to the merchant application; 

generating at the merchant application respective merchant session identifiers for the 
wireless session identifiers and transmitting the merchant session identifiers to the gateway 
module; 

associating the wireless session identifiers with corresponding merchant session 
identifiers at the gateway module, wherein respective connections are established between the 
mobile communications devices and the merchant application and 

in response to subsequent communications from the mobile devices to the merchant 
application while the respective cormections between the mobile devices to the merchant 
application are established and for communications within the respective sessions, transmitting 
from the gateway module to the merchant application the merchant session identifiers that are 
associated with the wireless session identifiers of the mobile devices of the subsequent 
communications. 
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6. The method of claim 5, further comprising: 

receiving checkout requests from the wireless communication devices at the gateway 
module and transferring the checkout requests to a wallet module that manages user 
authentication; 

when a user at a wireless communications device has logged-in to the wallet module, 
transmitting payment options from the wallet module to the wireless communications device in 
response to a checkout request from the wireless communications device; and 

when a user at a wireless communications device has not logged-in to the wallet module, 
transmitting a log-in prompt from the wallet module to the wireless communications device in 
response to a checkout request from the wireless communications device. 

7. The method of claim 6, further comprising generating at the wallet module respective wallet 
session identifiers for the wireless session identifiers and associating the wallet session 
identifiers with corresponding wireless session identifiers in a wallet session identifier table. 

8. The method of claim 7, fiirther comprising, in response to a payment request from a wireless 
commvmications device, transnoitting the payment request from the gateway module to the 
merchant appUcation, disassociating the wireless session identifier from the corresponding 
merchant session identifier, and generating a new wireless session identifier for the wireless 
communications device when another initial request is received from the wireless 
communications device. 
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9. The method of claim 8, further comprising clearing inactive entries from the wallet session 
identifier table. 

10. An apparatus for managing respective shopping sessions between wireless communication 
devices and a merchant application, comprising: 

means for generating respective wireless session identifiers upon receipt of initial 
requests from the wireless communication devices and fransmitting the wireless session 
identifiers to the merchant application; 

means for associating the wireless session identifiers with corresponding merchant 
session identifiers received from the merchant application, wherein respective connections are 
established between the mobile communications devices and the merchant application; and 

means for transmitting the merchant session identifiers that are associated with the 
wireless session identifiers of the wireless devices to the merchant application in response to and 
in association with subsequent commxmications from the wireless devices directed to the 
merchant application while the respective connections between the mobile devices to the 
merchant application are established and for communications within the respective sessions. 

1 1. A system for managing respective sessions between mobile communication devices and an 
application program hosted on a data processing system, comprising: 

a mobile interface configured and arranged to connect with a plurality of mobile 
communication devices; 
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a gateway coupled to the mobile interface and to the application program, the gateway 
configured to generate respective first session identifiers upon receipt of initial requests from the 
mobile communication devices, associate the first session identifiers with corresponding second 
session identifiers received from the application program, wherein respective connections are 
established between the mobile communications devices and the application program, and 
transmit the second session identifiers that are associated with the first session identifiers to the 
application program in response to and associated with subsequent communications from the 
mobile devices to the application program while the respective connections between the mobile 
devices to the application program are established and for communications within the respective 
sessions. 

12. The system of claim 11, further comprising an authentication module coupled to the mobile 
interface and to the gateway, the authentication module configured to transmit a log-in prompt to 
a mobile device in response to a request of the first type from the mobile device. 

13. The system of claim 12, wherein the authentication module is fiirther configured to generate 
respective authentication identifiers for the first session identifiers and associate the 
authentication identifiers with corresponding first session identifiers. 
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(10) Evidence Appendix 

Attached is a copy of Kocher et al., "The SSL Protocol Version 3.0", November 18, 
1996, which is relied on by the Examiner to interpret the teachings of Aziz for the rejection of 
claims 1-3, 4 and 1 1-13 under 35 U.S.C. §102(e) as being anticipated by Aziz. 
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(11) Related Proceedings Appendix 

None. 
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